SecurityWeek

GreenSQL, a company that SecurityWeek first met earlier this year during the RSA Conference, recently released the results of a poll that included more than 6,000 customers, IT administrators, DBAs, InfoSec practitioners, and consultants. The results, when focused on information security and database security, show that the majority fear SQL Injection vulnerabilities.

What to Do When Your Website Has Been HackedWhile the following is by no means exhaustive, here are a few suggestions to begin with if your web site has been hacked.

John Kiriakou, a former CIA officer from 1999 to 2004, was indicted on Thursday for allegedly disclosing classified information to journalists. The restricted disclosure included the name of a covert officer and information related to the role a CIA employee played in classified operations.His indictment comes following an investigation that was triggered by what the Department of Justice is calling a “classified defense filing” back in January 2009.

Security firm Sophos with dual headquarters in Boston, Massachusetts and Oxford, UK, made a decision to disable its partner portal following a breach that was discovered earlier this week. According to a notice on the portal itself, Sophos doesn’t know if any sensitive data was accessed including passwords and email addresses. Until the investigation in to the breach is concluded, the portal will remain offline.

Containing the Global Cybercrime Threat is The Focus of The CeCOS VI Summit Taking Place in Prague, Czech Republic Later This MonthLater this month, global leaders from various industries, government, law enforcement, communications sectors, and research centers will gather in in Prague, Czech Republic for the Counter eCrime Operations Summit (CeCOS VI).

Microsoft is prepping six security bulletins to cover 11 vulnerabilities as part of this month’s Patch Tuesday.

Security researchers say the Flashback malware hitting Mac OS X machines has built a powerful botnet of more than 550,000 computers.

In Australia, the local police will be informing businesses and residents that their wireless signal is unprotected and therefore open for criminal activity.According to the Sydney Morning Herald, police in Queensland will be the first to provide the new service. It is hoped that securing wireless in the area will help cut down on the number of cases of fraud, however, this is still just an informational campaign with no fines for non-compliance.

Trends Including Virtualization, Bring-Your-Own-Device and Cloud Computing are Making Data Center Security Increasingly Complex.

Dell SecureWorks recently published a report on the Waledac / Kelihos botnet and its role in a recent takedown operation. Unfortunately, while the initial efforts were successful, the controllers of the botnet have moved on and resumed operations.

A spam campaign leveraging the US Airways brand in order to get attention is offering something far more sinister than reservation details and travel information.

Lookout Mobile Security has discovered a new variant of the Legacy Native (LaNa) malware for Android which opens a backdoor to the device. Unlike previous versions of LaNa, where the device had to first be rooted and depended on user interaction, this new variant doesn’t require the user at all, and will work on non-rooted devices.

McAfee today launched a new agentless AntiVirus (AV) solution for its McAfee Management for Optimized Virtual Environments (MOVE) platform that provides protection against various physical and virtual attacks through a single console.Designed to integrate with VMware vShield™ Endpoint, the solution offers customers standardized security across all major hypervisor vendors and addresses the challenges of protecting virtual environments in order to keep them malware-free.

Armed With the Right Information, You Can Make Intelligence-driven Decisions to Help Better Defend the Enterprise

TIBCO Software, a publicly traded (NASDAQ: TIBX) provider of infrastructure software solutions, on Tuesday night said that it has entered into a definitive agreement to acquire San Jose California-based LogLogic, a provider of and log management and security intelligence solutions, for an undisclosed sum.

Findings from a recent study conducted by Tenable Network Security during the RSA Conference earlier this year, show that mobile device vulnerability management is a major concern for IT security teams.

Cyber criminals are going after Facebook users with a new version of the Ice IX malware.

Security firm Sophos today announced its intent to acquire DIALOGS, a small European mobile device management firm.Privately-held DIALOGS is headquartered in Germany and counts companies including BMW AG, Daimler AG, Siemens AG and ThyssenKrupp as customers.

Adobe Systems recently released an open source tool to help security pros in the fight against malware.According to the company, the Adobe Malware Classifier is a command-line tool aimed to help antivirus analysts, IT administrators and security researchers determine if a binary file contains malware so they can develop malware detection signatures faster. The tool uses machine-learning algorithms to categorize Win32 binaries – exe and DLL files – into three classes: 0, representing clean; 1, representing malicious; and unknown.

Pastebin.com has become a popular place for stolen data as well as boasts from hackers associated with Anonymous and other groups. The site’s status as a home for hackers may soon be in jeopardy however.In an interview with BBC, Pastebin owner Jeroen Vader stated that the site is looking to hire additional people to monitor the website’s content.